topic Re: HP-UX security settings in Operating System - HP-UX

HP-UX security settings

Murat SULUHAN — Mon, 24 Mar 2003 10:54:34 GMT

Hi

I am using HP-ux 11.0 and 11i.

How can I restrict telnet/ssh/XWindow login prompts and r* commands for some ip adress

Best Regards
Murat

Re: HP-UX security settings

Artyom Voronchihin — Mon, 24 Mar 2003 11:13:03 GMT

Hello!
man inetd.sec(4).
For example put follownig string to /var/adm/inetd.sec to allow telnet from appointed IP adresses.
telnet allow 192.168.0.1 192.168.0.10 .... and so on.
Also you can make changes in this file using SAM (goto Network and Communications - System Access - Internet Services).

Re: HP-UX security settings

Alex Glennie — Mon, 24 Mar 2003 11:15:10 GMT

c) Xwindows access is usually done via /usr/dt/config/Xaccess file .... documentation/syntax is within the file.

Re: HP-UX security settings

Maz_2 — Mon, 24 Mar 2003 11:18:09 GMT

As you can see there are numerous ways of restricting access, for example:
- inetd.sec
All of the internet services controlled by inetd (including telnet
and rlogin) have their access controlled by the security file
/var/adm/inetd.sec. To restrict or allow particular access, specifically list the service to be restricted, denied, or allowed. Then list specific IP addresses for individual hosts or use network addresses to deny or allow entire networks. Check the man pages on inetd.sec for more information on the
format of the file. The following is an example that will allow everything on
the 15.56 subnet and the single host 192.13.12.1 to telnet in.
Telnet sessions from all other hosts will be denied: telnet allow 15.56.* 192.13.12.1

Hope this helps!